AMENDMENTS TO THE CLAIMS 

1 1-10. (Canceled) 



1 11. (Currently Amended) A method of determining enforcement security devices in a 

2 network topology, the method comprising the computer-implemented steps of: 

3 locating a plurality of adjacent nodes with in a sequence of nodes , the plurality of 

4 adjacent nodes being between a source node and a destination node in the 

5 network topology, each locat e d node in the s e quenc e plurality of adjacent 

6 nodes having at least two adjacent nodes, including a previous node in the 

7 sequence and a next node in the sequence, wherein for each locat e d node in 

8 the plurality of adjacent nodes, the next node is different than the previous 

9 node; 

1 0 for each locat e d particular node in the sequence: 

1 1 determining if the locat e d particular node is the destination node, and if the locat e d 

12 particular node is the destination node, then identifying each node in the 

13 sequence as being part of a path closure set b e tw ee n for the source node and 

1 4 the destination node; 

15 determining if the locat e d particular node is a loop closure node, and if the locat e d 

16 particular node is a loop closure node, then determining if one or more nodes 

17 in the sequence that are part of a loop path defined by the loop closure node 

1 8 are already designated as being part of the path closure set, and 

19 if one or more nodes in the sequence that are part of a loop path defined by the loop 

20 closure node are already designated as being part of the path closure set, then 
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21 



designating each node in the loop path as part of the path closure set, else 



22 



designating each node in the loop path as part of the path closure set if at least 



23 



a designated node in the loop path is subsequently determined to be 



24 



part of the path closure set. 



1 12. (Original) A method as recited in Claim 11, wherein locating a plurality of adjacent 

2 nodes in a sequence includes locating each node in the network topology using the sequence. 

1 13. (Original) A method as recited by Claim 11, further comprising identifying one or 

2 more enforcement security devices from nodes in the path closure set. 

1 14. (Original) A method as recited in Claim 11, further comprising identifying one or 

2 more enforcement security devices from nodes in the path closure set, and implementing a 

3 security policy on the identified one or more enforcement security devices. 

1 15. (Currently Amended) A method as recited in Claim 11, wherein determining that the 

2 locat e d particular node is a loop closure node includes determining that the locat e d particular 

3 node was located as a next node for at least two other nodes in the sequence. 

1 16. (Original) A method as recited in Claim 11, wherein designating each node in the 

2 loop path as part of the path closure set if a designated node in the loop path is subsequently 

3 determined to be part of the path closure set includes designating each node in the loop path 

4 as part of the path closure set if one of the at least two nodes in the sequence that are adjacent 

5 to the loop closure node is subsequently determined to be part of the path closure set. 
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1 17. (Original) A method as recited in Claim 11, wherein locating a plurality of adjacent 

2 nodes in a sequence includes locating the plurality of nodes using a depth- first methodology. 

1 18-30. (Canceled) 

2 31. (Currently Amended) A computer-implemented method of determining security 

3 devices in a network topology, the method comprising: 

4 identifying a source node and a destination node for traffic that is to be sent through 

5 the network topology; 

6 for each particular node in the network topology, adding the particular node to a path 

7 closure set for the source node and destination node if a determination is made 

8 that the particular node is part of a looping sequence of nodes in which (a) at 

9 least one node in the looping sequence is already designated as being part of 

10 the path closure set and (b) the at least one node designated as being part of 

11 the path closure set is not also a loop closure node for that looping sequence; 

12 and 

13 storing a list of one or more security devices that occur in the path closure set. 

14 32. (Currently Amended) A computer-implemented method of determining security 

1 5 devices in a network topology, the method comprising: 

16 identifying a source node and a destination node for traffic that is to be sent through 

1 7 the network topology; 

1 8 for each particular node in the network topology, adding the particular node to a path 

19 closure set for the source node and destination node i f a determination is made 
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1 that the particular node is part of a looping sequence of nodes in which at least 

2 one node adjacent to a loop closure node for that looping sequence of nodes is 

3 subsequently identified as being part of the path closure set; and 

4 storing a list of one or more security devices that occur in the path closure set. 

5 33. (Currently Amended) A computer readable medium for determining security devices 

6 in a network topology, the computer readable medium carrying instructions for 

7 performing the steps of: 

8 identifying a source node and a destination node for traffic that is to be sent through 

9 the network topology; 

10 for each particular node in the network topology, adding the particular node to a path 

1 1 closure set for the source node and destination node if a determination is made 

12 that the particular node is part of a looping sequence of nodes in which (a) at 

13 least one node in the looping sequence is already designated as being part of 

14 the path closure set and (b) the at least one node designated as being part of 

15 the path closure set is not also a loop closure node for that looping sequence; 

16 and 

17 storing a list of one or more security devices that occur in the path closure set. 

1 8 34. (Currently Amended) A computer readable medium for determining security devices 

19 in a network topology, the computer readable medium carrying instructions for 

20 performing the steps of: 

21 identifying a source node and a destination node for traffic that is to be sent through 

22 the network topology; 
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1 for each particular node in the network topology, adding the particular node to a path 

2 closure set for the source node and destination node i f a determination is made 

3 that the particular node is part of a looping sequence of nodes in which at least 

4 one node adjacent to a loop closure node for that looping sequence of nodes is 

5 subsequently identified as being part of the path closure set; and 

6 storing a list of one or more security devices that occur in the path closure set. 

7 35. (Currently Amended) A computer system to determine security devices in a network 

8 topology, the computer system comprising: 

9 means for identifying a source node and a destination node for traffic that is to be sent 

1 0 through the network topology; 

1 1 means for adding, for each particular node in the network topology, the particular 

12 node to a path closure set for the source node and destination node ifa 

13 determination is made that the particular node is part of a looping sequence of 

14 nodes in which (a) at least one node in the looping sequence is already 

15 designated as being part of the path closure set and (b) the at least one node 

16 designated as being part of the path closure set is not also a loop closure node 

1 7 for that looping sequence; and 

1 8 means for storing a list of one or more security devices that occur in the path closure 

19 set. 

20 36. (Currently Amended) A computer system to determine security devices in a network 

2 1 topology, the computer system comprising: 
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1 means for identifying a source node and a destination node for traffic that is to be sent 

2 through the network topology; 

3 means for adding, for each particular node in the network topology, the particular 

4 node to a path closure set for the source node and destination node if a 

5 determination is made that the particular node is part of a looping sequence of 

6 nodes in which at least one node adjacent to a loop closure node for that 

7 looping sequence of nodes is subsequently identified as being part of the path 

8 closure set; and 

9 means for storing a list of one or more security devices that occur in the path closure 
10 set. 
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